Authentication & Security Requirements
The authentication methods our platform supports and their security rules.
Our platform supports multiple authentication methods. Each has different security and lifecycle rules, outlined below.
1. Email & Password Authentication
- Minimum password length: 6 characters
- Password expiration: Passwords do not expire
- Multi-factor authentication (MFA): Not supported for email/password logins
- Session timeout: Auth sessions expire after 24 hours of inactivity
2. Single Sign-On (SSO)
When logging in via SSO, authentication security is enforced by your identity provider (IdP).
This allows customers to apply their own password complexity, expiration, and MFA requirements.
- Password rules: Managed by your IdP
- MFA: Enforced by your IdP
- Session Management: Managed by your IdP
3. API Tokens
API tokens are used for programmatic access to the platform. This ensures there is never more than one valid token associated with a user at any time
- Expiration: Tokens do not expire
- Quanitty: One active token per user
- Rotation: Creating a new token automatically invalidates the previous one
This ensures there is never more than one valid token associated with a user at any time.